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Top Stories 

• AEP/SWEPCO reported May 28 that service had been restored to 54,000 of the 60,000 
homes and businesses that had lost power due to severe storms that moved through Texas 
May 25. - Mount Pleasant Daily Tribune (See item 3) 

• Eiat Chrysler Automobiles announced plans to recall an additional 1 .4 million vehicles 
globally in connection to an issue with air bags manufactured by the Takata Corporation.- 
USA Today (See item 6) 

• Security researchers discovered a malware campaign, dubbed Grabit, which has infiltrated 
businesses worldwide with a commercial keylogger called HawkEye and several remote 
administration tools distributed via emails. - Softpedia (See item 

• Security researchers identified over 50 vulnerabilities in network-attached storage and 
network video recorder products from D-Eink, including information leakage, 
authentication flaws, CGI vulnerabilities, input validation problems, and Web page issues. 
- Securityweek (See item 23) 
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Energy Sector 



1 . May 29, Malden Patch - (Massachusetts) Large power outage Friday morning in 
Malden, Medford and Melrose. National Grid reported May 29 that a power outage at 
its Everett Substation affected over 45,000 people in Malden, Everett, Medford and 
Melrose, and services were expected to be restored within 6 hours. The Massachusetts 
Bay Transit Authority reported severe delays on Orange Eine trains due to the outage. 
Source: http://patch.com/massachusetts/malden/large-power-outage-fridav-moming- 
medford-and-malden-0 

2. May 28, WFMJ 21 Youngstown - (Ohio) Youngstown company fined for dumping 
drilling waste. Hardrock Excavating pleaded guilty May 28 to illegally dumping tens 
of thousands of gallons of drilling waste into the Mahoning River and its tributaries, 
which resulted in $3 million dollars’ worth of environmental cleanup. The company 
was fined $75,000 and was ordered to make $25,000 in community service payments. 
Source: http://www.wfmj.com/storv/29179584/voungstown-companv-fined-for- 
dumping-drilling-waste 

3. May 29, Mount Pleasant Daily Tribune - (Texas) Power largely restored. 
AEP/SWEPCO reported May 28 that service had been restored to 54,000 of the 60,000 
homes and businesses that had lost power due to severe storms that moved through the 
area on May 25. 

Source: http ://w w w . daily tribune . net/new s/po wer-lar gel v-restored/article 5272945e- 
0606-lle5-a93b-83f439289ef0.html 

[ Return to top ] 

Chemical Industry Sector 

4. May 28, Amarillo Globe-News - (Texas) 10 hospitalized after leak at Agrium plant. 
An anhydrous ammonia leak prompted the evacuation and closure of a Urea Unit at the 
Agrium plant in Borger, Texas May 28, injuring 10 people and sending them to area 
hospitals. An investigation is ongoing to determine the cause of the accident. 

Source: http://amarillo.eom/news/local-news/2015-05-28/10-hospitalized-after-leak- 
agrium-plant 

Eor another story, see item 22 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 
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5. May 27, U.S. Department of Labor - (New Jersey) OSHA finds workers again 
exposed to safety and health hazards at Camden, New Jersey, warehouse. The 
Occupational Safety and Health Administration cited Camden-based Magnetic Metals 
Corp., with 15 violations that involve not placing devices on machinery to prevent the 
sudden startup or movement of equipment during service and maintenance. Proposed 
penalties total $53,900. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28059 

6. May 29, USA Today - (International) Automakers add millions more cars to Takata 
air bag recalls. Fiat Chrysler Automobiles announced plans to recall an additional 1 .4 
million vehicles globally, Honda Motor Company, Ltd., added 350,000 vehicles in the 
U.S., and BMW added 420,100 in the U.S. in connection to an issue with air bags 
manufactured by the Takata Corporation that could cause them to prematurely inflate 
or explode, increasing the risk of injury and crashes to drivers and passengers. 

Source: http://www.usatodav.eom/storv/monev/cars/2015/05/28/automakers-takata- 
recall-nhtsa/28074627/ 

7. May 28, Pittsburgh Tribune -Review - (Pennsylvania) ‘Defective Component’ shuts 
down part of new ATI Harrison mill. Allegheny Technologies Inc., announced May 
28 that a defect in a rotary crop shear at its new hot-rolling mill in Harrison could result 
in profit losses of up to $20 million due to lost efficiency, and that customers should 
not be impacted. 

Source: 

http://triblive.com/neighborhoods/vourallekiskivallev/vourallekiskivallevmore/845956Q 
-7 4/mill- ati-continue#axzz3bX A vx g3X 

For another story, see item 22 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

8. May 29, Asbury Park Press - (New Jersey) Jackson man admits $6M mortgage 
scam. A former loan officer in North Jersey pleaded guilty May 28 to his role in a $6 
million mortgage fraud scheme in which he allegedly conspired with 9 others to target 
15 institutions in Newark and Elizabeth and used information about potential “straw 
buyers” along with falsified documents to obtain mortgage loans. Authorities believe 
the scheme caused establishments around $10 million in losses over a 4-year period. 
Source: http://www.app.eom/storv/news/crime/iersev-mavhem/2015/05/28/ioseph- 
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divalli-iackson-mortgage-scam/28080355/ 



9. May 28, Leesburg Today - (Virginia) Bicycle Bank Bandit indicted on 16 counts. 

The suspect dubbed the “Bicycle Bandit” was indicted May 28 on charges that he 
allegedly robbed 5 Northern Virginia banks and attempted to rob another between 2013 
- 2015. The suspect was originally charged in March but escaped from a hospital where 
he was receiving treatment, triggering a large manhunt. 

Source: http://www.leesburgtodav.com/news/bicycle-bank-bandit-indicted-on- 
counts/article f0d74f9e-0576-l Ie5-b96c-97fc7e4608bc.html 

[ Return to top ] 

Transportation Systems Sector 

10. May 28, WKMG 6 Orlando - (Florida) 1-95 in Brevard County reopens after crash 
involving semi. Interstate 95 in Brevard County at mile marker 177 was shut down for 
approximately 4 hours May 28 due to an accident involving a semi-truck and a truck 
hauling a motorhome. No injuries were reported and the crash remains under 
investigation. 

Source: http://www.clickorlando.com/news/crash-shuts-down-i95-in-brevard- 
county/33274882 

11. May 28, KVUE 24 Austin - (Texas) Small plane catches fire after emergency 
landing in Llano Co. The Federal Aviation Administration reported May 28 a small 
plane caught fire after crashing in Llano County, Texas, on Highway 71, causing a 
roadway closure for several hours while crews responded. The pilot was taken by 
ambulance to an area hospital. 

Source: http://www.kvue.eom/storv/news/state/2015/05/28/small-plane-catches-fire- 
after-emergencv-landing-in-llano-co/280825 1 1/ 

12. May 28, Mississippi News Now - (Mississippi) HAZMAT crew cleans spill after 
train derailment. A Canadian National train hauling nitrogen fertilizer derailed and 
spilled its content May 28 in Jackson, Mississippi, prompting HAZMAT crews to 
respond to the scene. No injuries were reported. 

Source: http://www.wmcactionnews5.com/story/29183988/hazmat-crew-cleans-spill- 
after-train-derailment 

13. May 28, WEEK 25 East Peoria - (Illinois) Suspect pleads guilty in September FAA 
control tower fire. A contract worker pleaded guilty May 28 to setting fire at a 
Chicago radar facility last September that allegedly disabled all radar feeds to the 
Federal Aviation Administration air controllers, ignited gas-soaked rags near sensitive 
equipment, and damaged the communication systems, canceling more than 700 flights 
at O’ Hare Airport and more than 150 flights at Midway Airport. 

Source: http://www.cinewsnow.com/news/local/Suspect-pleads-guilty-in-September- 
FAA-control-tower-fire-305345591.html 



For another story, see item 1 
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Food and Agriculture Sector 

14. May 28, Imperial Valley News - (California) Los Angeles County portion under 
quarantine for the guava fruit fly. An 80-square mile quarantine was placed in 
portions of Los Angeles County as 8 guava fruit flies were detected within the City of 
Long Beach May 28, that if left untouched, could damage homegrown fruits and 
vegetables. Federal, State, and county officials are working to limit the spread of the 
flies. 

Source: http://www.imperialvallevnews.com/index.php/news/califomia-news/3531-los- 
angeles-countv-portion-under-quarantine-for-the-guava-fruit-flv.html 

For additional stories, see items 4 and 22 
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Water and Wastewater Systems Sector 

15. May 28, KPRC 2 Houston - (Texas) 4 areas of wastewater spills due to historic 
flooding. The city of Houston reported May 28 that 3 wastewater treatment plant 
service areas were impacted by historic flooding that caused the Governor of Texas to 
grant a Declaration of Disaster. Water treatment plants are fully operational and the 
spill does not currently impact the public. 

Source: http://www.click2houston.com/news/water-qualitv-in-houston-area-not- 
affected-after-floods-cause-wastewater-spill/33240226 

For another story, see item 2 
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Healthcare and Public Health Sector 

16. May 29, Fox News - (International) CDC says 150 people possible came into contact 
with man who died of Lassa fever. The Centers for Disease Control and Prevention 
(CDC) announced May 28 that health officials are monitoring over 150 people who 
may have come in contact with a New Jersey man who died of Lassa fever in Newark’s 
University Hospital May 25. At least 6 are reported to have a high risk of exposure, and 
another 33 are at a low risk. 

Source: http://www.foxnews.eom/health/2015/05/29/150-people-possiblv-came-into- 
contact-with-man-who-died-lassa-fever-cdc-says/ 

17. May 28, WFMY 2 Greensboro - (North Carolina) Patients Want Medical Records 
After Yadkin Co. Hospital Closes. Yadkin County representatives are working to 
retrieve the medical records for residents after the Yadkin County Hospital closed 
abmptly May 22 due to issues with the hospital operator’s lease agreement. There is no 
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timeline for when a new provider will take over the hospital. 

Source: http://www.wfmvnews2.eom/storv/news/2015/05/28/vadkin-vallev-hospital- 
whats-next/28 129639/ 



18. May 28, WJZ 13 Baltimore - (Maryland; Washington, D.C.) DOJ Busts Alleged ‘Pill 
Mills’ in Maryland. Sixteen people have been charged with operating pain clinics or 
“pill mills” to sell prescription-strength pain medication for profit as a result of a 15- 
month federal investigation. Employees of PG Wellness Center, First Priority Health 
Care, and MPC Wellness Center in Maryland, as well as A-Plus Pain Center in 
Washington, D.C. are alleged to have illegally supplied Oxycodone pills through 
“runners” who would submit false claims and return the pills to clinic operators to be 
sold on the street. 

Source: http://baltimore.cbslocal.eom/2015/05/28/doj-busts-alleged-pill-mills-in- 
maryland/ 



19. May 28, U.S. Department of Justice - (California) May 28, 2015: La Jolla Nurse 
Convicted of Diluting Pain Killers. A registered nurse at La Jolla Women’s Surgery 
Center in San Diego, California, pleaded guilty May 28 to siphoning off Meperidine 
Hydrochloride and replacing the pain killer with saline solution from October 2014- 
March 2015. The tainted drugs were administered to between 50-250 patients, although 
there is no evidence that any patients were harmed. 

Source: http://www.fda.gov/ICECECriminalInvestigations/ucm44858Q.htm 
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Government Facilities Sector 

20. May 28, Washington Post - (Washington, D.C.) Broken elevator causes Washington 
Monument to close. National Park Service officials reported the Washington 
Monument is closed for an uncertain amount of time May 28 due to an electrical 
problem with its elevator. 

Source: http://www.washingtonpost.com/local/broken-elevator-causes-washington- 
monument-to-close/201 5/05/28/737703 14-053f-lle5-8bda-c7b4e9a8f7ac story.html 

[ Return to top ] 

Emergency Services Sector 

21. May 28, Pueblo Chieftain - (Colorado) Fire at jail prompts evacuation; 8 moved. A 
May 28 fire prompted the evacuation of the Saguache County jail where 8 inmates 
were moved to Rio Grande County jail and 2 others were sent to area hospitals. The 
Colorado undersheriff reported that the incident is under investigation, but believes up 
to three inmates may have sparked the fire by using a lighter on an electrical outlet 
Source: http://www.chieftain.com/news/region/3639953-120/fire-jail-inmates- 
mccloskey 
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Information Technology Sector 

22. May 29, Softpedia - (International) Non-sophisticated malware steals thousands of 
credentials from targeted SMBs. Security researchers from Kaspersky discovered a 
large malware campaign, dubbed Grabit that has infiltrated small and medium 
businesses worldwide across a variety of sectors with a commercial keylogger called 
HawkEye and several remote administration tools (RATs) distributed via emails 
containing malicious macro-laden Microsoft Word documents. The researchers 
reported that the campaign has collected about 10,000 files from the U.S., India, and 
Thailand since February. 

Source: http://news.softpedia.com/news/Non-Sophisticated-Malware-Steals- 
Thousands-of-Credentials-from-Targeted-SMBs-482696.shtml 

23. May 29, Securityweek - (International) Researchers find over 50 security flaws in D- 
Link NAS, NVR devices. Security researchers at SEARCH-LAB identified over 50 
vulnerabilities in network-attached storage (NAS) and network video recorder (NVR) 
products from D-Link, including information leakage, authentication flaws, CGI 
vulnerabilities, input validation problems, and Web page issues, some of which 
attackers could exploit remotely to execute arbitrary code and take over affected 
devices. 

Source: http://www.securitvweek.com/researchers-find-over-50-security-flaws-d-link- 
nas-nvr-devices 



24. May 29, Threatpost — (International) Angler Exploit Kit exploiting new Adobe 
vulnerability, dropping CryptoWall 3.0. A security researcher at SANS Internet 
Storm Center discovered variants of the Angler Exploit Kit (EK) dropping CryptoWall 
ransomware on affected machines for the first time, and security researchers at FireEye 
observed that the EK added a recent Adobe Flash Player vulnerability in which 
attackers could exploit a race condition in its shader class to execute arbitrary code.. 
Source: https://threatpost.com/angler-exploit-kit-exploiting-new-adobe-vulnerability- 
dropping-crvptowall-3-0/1 13044 

For another story, see item 25 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



See item 22 
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Commercial Facilities Sector 

25. May 29, Security - (International) Sally Beauty: Cybercriminals planted 
malware on PoS Systems for 6 weeks. Sally Beauty announeed May 28 that 
cybercriminals had deployed malware on multiple company point-of-sale (PoS) 
systems between March and April, and that it had cleaned the malware from all 
affected systems. The company believes attackers accessed names, credit and debit card 
numbers, expiration dates, cardholder verification values, and service codes in the 
breach. 

Source: http://www.securitvweek.com/sallv-beautv-cybercriminals-planted-malware- 
pos-systems-6-weeks 

26. May 29, Houston Chronicle - (Texas) 2-alarm apartment fire in Southwest Houston 
displaces residents. A 2-alarm fire damaged up to 16 units in the Houston Crescent 
Place Apartment complex, as well as nearby cars May 29. Crews contained the fire to 
one unit, and an investigation is underway to determine the cause of the fire. 

Source: http://www.chron.com/news/houston-texas/article/2-alarm-apartment-fire-in- 
Southwest-Houston-6294009.php 

27. May 28, KNSD 39 San Diego - (California) Gas leak forces evacuations in Scripps 
Ranch. A large gas leak at the Scripps Ranch Business Park in California prompted the 
evacuation of 50 people May 28 for over 2 hours as crews worked to stop the leak. 
Officials reported that it originated from a hit-and-run accident and an investigation is 
ongoing to find the driver. 

Source: http://www.nbcsandiego.com/news/local/Gas-Leak-Forces-Evacuations-in- 
Lake-Miramar-Area-30541 879 1 .html 



For another story, see item 22 
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Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support® govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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